Courts can have closed source code audited. It’s literally done in a locked room on a device that doesn’t have the ability to export, and people that enter the room are monitored.